services:
  coding-agent-mcp:
    build:
      context: .
      dockerfile: Dockerfile
    command:
      - node
      - src/coding-agent-index.js
      - --transport
      - http
      - --host
      - 0.0.0.0
      - --port
      - "3000"
      - --root
      - /workspace
    environment:
      CODING_AGENT_MCP_API_KEYS: ${CODING_AGENT_MCP_API_KEYS}
      CODING_AGENT_MCP_EXECUTION_BACKEND: local
      MCP_DEBUG_REQUESTS: "false"
    volumes:
      - ${CODING_AGENT_ROOT_HOST_PATH}:/workspace
    user: "${CODING_AGENT_UID:-10001}:${CODING_AGENT_GID:-10001}"
    read_only: true
    tmpfs:
      - /tmp:rw,noexec,nosuid,size=256m
    cap_drop:
      - ALL
    security_opt:
      - no-new-privileges:true
    pids_limit: 256
    mem_limit: 1g
    cpus: 2
    init: true
    networks:
      - backend
    restart: unless-stopped

  caddy:
    image: caddy:2
    depends_on:
      - coding-agent-mcp
    ports:
      - "80:80"
      - "443:443"
    environment:
      DOMAIN_NAME: ${DOMAIN_NAME}
    volumes:
      - ./deploy/Caddyfile:/etc/caddy/Caddyfile:ro
      - caddy_data:/data
      - caddy_config:/config
    networks:
      - frontend
      - backend
    restart: unless-stopped

volumes:
  caddy_data:
  caddy_config:

networks:
  frontend:
  backend:
    internal: true